@cavuno/board 1.38.0 → 1.40.0

package/dist/doctor.mjs

@@ -102,6 +102,156 @@ function summarize(results) {
   return { exitCode: failed.length > 0 ? 1 : 0, passed, failed, skipped };
 }
 
+// src/doctor/cookie-conformance.ts
+import { existsSync, readdirSync, readFileSync as readFileSync2, statSync } from "fs";
+import { join, relative } from "path";
+var COOKIE = record("static.cookie-codec", 1);
+var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
+var REMEDIATION = "set cookies only through the SDK server cookie codec (buildCookie/buildClearCookie from @cavuno/board/server)";
+var SET_COOKIE_SINK = /set-cookie/i;
+var DOCUMENT_COOKIE_ASSIGN = /document\.cookie\s*\+?=(?!=)/i;
+var DOMAIN_SCOPE = /domain\s*=/i;
+var LOOKAHEAD_LINES = 3;
+function stripComments(line) {
+  let out = "";
+  let i = 0;
+  let quote = null;
+  while (i < line.length) {
+    const c = line[i];
+    if (quote !== null) {
+      out += c;
+      if (c === "\\" && i + 1 < line.length) {
+        out += line[i + 1];
+        i += 2;
+        continue;
+      }
+      if (c === quote) quote = null;
+      i += 1;
+      continue;
+    }
+    if (c === "'" || c === '"' || c === "`") {
+      quote = c;
+      out += c;
+      i += 1;
+      continue;
+    }
+    if (c === "/" && i + 1 < line.length && line[i - 1] !== "\\") {
+      const next = line[i + 1];
+      if (next === "/") {
+        break;
+      }
+      if (next === "*") {
+        i += 2;
+        while (i < line.length) {
+          if (line[i] === "*" && i + 1 < line.length && line[i + 1] === "/") {
+            i += 2;
+            break;
+          }
+          i += 1;
+        }
+        continue;
+      }
+    }
+    out += c;
+    i += 1;
+  }
+  return out;
+}
+function isCommentLine(line) {
+  const trimmed = line.trim();
+  if (trimmed.startsWith("*")) return true;
+  return stripComments(line).trim() === "";
+}
+function hasCookieWriteSink(line) {
+  return SET_COOKIE_SINK.test(line) || DOCUMENT_COOKIE_ASSIGN.test(line);
+}
+function statementWindow(lines, sinkIdx) {
+  const sinkStripped = stripComments(lines[sinkIdx]);
+  const parts = [sinkStripped];
+  if (sinkStripped.includes(";")) return sinkStripped;
+  let taken = 0;
+  for (let j = sinkIdx + 1; j < lines.length && taken < LOOKAHEAD_LINES; j += 1) {
+    const next = lines[j];
+    if (isCommentLine(next)) continue;
+    const stripped = stripComments(next);
+    parts.push(stripped);
+    taken += 1;
+    if (stripped.includes(";")) break;
+  }
+  return parts.join("\n");
+}
+function isOffendingSink(lines, index) {
+  const line = lines[index];
+  if (isCommentLine(line)) return false;
+  const stripped = stripComments(line);
+  if (!hasCookieWriteSink(stripped)) return false;
+  return DOMAIN_SCOPE.test(statementWindow(lines, index));
+}
+function walkSourceFiles(dir, out) {
+  let entries;
+  try {
+    entries = readdirSync(dir);
+  } catch {
+    return;
+  }
+  for (const name of entries) {
+    if (name === "node_modules" || name.startsWith(".")) continue;
+    const full = join(dir, name);
+    let st;
+    try {
+      st = statSync(full);
+    } catch {
+      continue;
+    }
+    if (st.isDirectory()) {
+      walkSourceFiles(full, out);
+    } else if (st.isFile() && SOURCE_EXT.test(name)) {
+      out.push(full);
+    }
+  }
+}
+function truncate(line, max = 120) {
+  const t = line.trim();
+  return t.length > max ? `${t.slice(0, max)}\u2026` : t;
+}
+function checkCookieCodecConformance(projectRoot) {
+  const srcDir = join(projectRoot, "src");
+  if (!existsSync(srcDir)) {
+    return [
+      COOKIE(
+        "skip",
+        "no src/ directory \u2014 cookie-codec conformance scan skipped"
+      )
+    ];
+  }
+  const files = [];
+  walkSourceFiles(srcDir, files);
+  const findings = [];
+  for (const file of files) {
+    const rel = relative(projectRoot, file).split("\\").join("/");
+    let text;
+    try {
+      text = readFileSync2(file, "utf8");
+    } catch {
+      continue;
+    }
+    const lines = text.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i += 1) {
+      if (!isOffendingSink(lines, i)) continue;
+      findings.push(`${rel}:${i + 1} \u2014 ${truncate(lines[i])}`);
+    }
+  }
+  if (findings.length === 0) {
+    return [
+      COOKIE(
+        "pass",
+        "no domain-scoped Set-Cookie or document.cookie writes in src/"
+      )
+    ];
+  }
+  return [COOKIE("fail", `${findings.join("; ")}; ${REMEDIATION}`)];
+}
+
 // src/doctor/probe.ts
 var FETCH_TIMEOUT_MS = 1e4;
 async function probe(fetchImpl, url) {
@@ -221,14 +371,82 @@ async function runReadProbes(fetchImpl, frontendUrl) {
   ];
 }
 
+// src/doctor/sandbox.ts
+var SANDBOX_GATE = record("sandbox.persona-gate", 1);
+var EXPECTED_PERSONA_COUNT = 8;
+function skipSandboxPersonaGate(reason) {
+  return SANDBOX_GATE("skip", reason);
+}
+async function checkSandboxPersonaGate(fetchImpl, env, boardContext) {
+  if (boardContext === null) {
+    return SANDBOX_GATE(
+      "skip",
+      "board did not resolve \u2014 fix static.board first"
+    );
+  }
+  const url = `${apiBase(env.apiUrl)}/v1/boards/${encodeURIComponent(env.boardKey)}/sandbox/personas`;
+  const result = await probe(fetchImpl, url);
+  if (boardContext.sandbox !== true) {
+    return result.status === 404 ? SANDBOX_GATE(
+      "pass",
+      "sandbox persona endpoint refuses (404) on a non-sandbox board"
+    ) : SANDBOX_GATE(
+      "fail",
+      `sandbox persona endpoint is reachable on a NON-sandbox board (HTTP ${result.status}) \u2014 the capability gate is not holding`
+    );
+  }
+  if (!result.ok) {
+    return SANDBOX_GATE(
+      "fail",
+      `sandbox persona roster did not resolve (HTTP ${result.status}) \u2014 the persona seed may have failed`
+    );
+  }
+  let personas;
+  let password;
+  try {
+    const parsed = JSON.parse(result.body);
+    personas = parsed.personas;
+    password = parsed.password;
+  } catch {
+    return SANDBOX_GATE(
+      "fail",
+      "sandbox persona endpoint returned 200 but not JSON \u2014 proxy or captive portal in the way?"
+    );
+  }
+  if (!Array.isArray(personas) || personas.length !== EXPECTED_PERSONA_COUNT) {
+    return SANDBOX_GATE(
+      "fail",
+      `expected ${EXPECTED_PERSONA_COUNT} personas, got ${Array.isArray(personas) ? personas.length : "a non-array"} \u2014 the persona seed is incomplete`
+    );
+  }
+  const unseeded = personas.filter((persona) => persona.seeded !== true);
+  if (unseeded.length > 0) {
+    const ids = unseeded.map((persona) => typeof persona.id === "string" ? persona.id : "?").join(", ");
+    return SANDBOX_GATE(
+      "fail",
+      `${unseeded.length} of ${EXPECTED_PERSONA_COUNT} personas are not seeded on the board (${ids}) \u2014 the persona seed failed or was purged; run POST /v1/boards/{key}/sandbox/reseed to restore the roster`
+    );
+  }
+  if (typeof password !== "string" || password.length === 0) {
+    return SANDBOX_GATE(
+      "fail",
+      "roster present but the published password is missing"
+    );
+  }
+  return SANDBOX_GATE(
+    "pass",
+    `sandbox roster complete and seeded (${EXPECTED_PERSONA_COUNT} personas)`
+  );
+}
+
 // src/doctor/theme.ts
 import { createHash } from "crypto";
-import { existsSync, readFileSync as readFileSync2 } from "fs";
-import { join } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
+import { join as join2 } from "path";
 var THEME = record("static.theme", 1);
 function checkThemeFreshness(projectRoot, context) {
-  const tokensPath = join(projectRoot, "src/tokens.css");
-  if (!existsSync(tokensPath)) {
+  const tokensPath = join2(projectRoot, "src/tokens.css");
+  if (!existsSync2(tokensPath)) {
     return [
       THEME(
         "skip",
@@ -236,9 +454,9 @@ function checkThemeFreshness(projectRoot, context) {
       )
     ];
   }
-  const tokensHash = createHash("sha256").update(readFileSync2(tokensPath, "utf8"), "utf8").digest("hex");
-  const resolvedPath = join(projectRoot, "src/theme/resolved.ts");
-  const resolvedHash = existsSync(resolvedPath) ? readFileSync2(resolvedPath, "utf8").match(
+  const tokensHash = createHash("sha256").update(readFileSync3(tokensPath, "utf8"), "utf8").digest("hex");
+  const resolvedPath = join2(projectRoot, "src/theme/resolved.ts");
+  const resolvedHash = existsSync2(resolvedPath) ? readFileSync3(resolvedPath, "utf8").match(
     /tokensHash = '([0-9a-f]{64})'/
   )?.[1] ?? null : null;
   if (resolvedHash !== tokensHash) {
@@ -478,8 +696,8 @@ async function runWriteProbes(options) {
 }
 
 // src/doctor/run.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
+import { join as join3 } from "path";
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -545,8 +763,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => join2(projectRoot, root)).filter(
-    (root) => existsSync2(root)
+  const roots = SKILL_ROOTS.map((root) => join3(projectRoot, root)).filter(
+    (root) => existsSync3(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -559,10 +777,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = join2(root, skill.name, "SKILL.md");
-      if (!existsSync2(copied)) continue;
+      const copied = join3(root, skill.name, "SKILL.md");
+      if (!existsSync3(copied)) continue;
       seen.add(skill.name);
-      if (readFileSync3(copied, "utf8") !== skill.content) {
+      if (readFileSync4(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -612,6 +830,12 @@ async function runDoctor(options) {
   results.push(
     ...checkThemeFreshness(options.projectRoot ?? process.cwd(), boardContext)
   );
+  results.push(
+    ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
+  );
+  results.push(
+    envOk ? await checkSandboxPersonaGate(fetchImpl, env, boardContext) : skipSandboxPersonaGate("env checks failed \u2014 fix them first")
+  );
   results.push(
     ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl) : skipReadProbes("no --frontend <url> given")
   );

package/dist/filters.d.mts

@@ -1,5 +1,6 @@
 import { B as BoardLabelOverrides } from './ui-copy-CKfFTtLk.mjs';
-import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-DMH3Ytoq.mjs';
+import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-DhePKSRe.mjs';
+import './_spec-DRbgPIlN.mjs';
 
 declare const REMOTE_OPTIONS: readonly RemoteOption[];
 /**
@@ -33,6 +34,12 @@ interface ListingFilters {
     employmentType?: EmploymentType;
     /** Multi-select (parity with the hosted board's seniority checkboxes). */
     seniority?: Seniority[];
+    /**
+     * Company filter as PUBLIC SLUGS (the URL identity). Multi-select tolerated
+     * in URLs (comma-joined); the hosted UI applies single-replace. Map to the
+     * wire as `companySlug` (`jobs.list` query / `jobs.search` filters).
+     */
+    company?: string[];
     /** Result ordering (ADR-0048); absent ⇒ `relevance`. */
     sort?: JobSort;
 }
@@ -42,14 +49,21 @@ interface ListingFilters {
  * semantics: trim, lowercase, drop unknowns, dedupe preserving order.
  */
 declare function parseSeniority(raw: unknown): Seniority[] | undefined;
+/**
+ * Normalise raw company-slug input — an array (repeated params) or a
+ * comma-string (hand-typed URL) — with the hosted semantics: trim,
+ * lowercase, drop empties, dedupe preserving order, then cap at 10
+ * (the wire max; keep FIRST 10). Open value set (no vocabulary).
+ */
+declare function parseCompany(raw: unknown): string[] | undefined;
 /**
  * Validate raw URL search params into the supported listing filters,
  * dropping unknown values (never throwing — listing URLs are public input).
  *
  * @example
- * parseListingFilters({ seniority: 'senior,lead', sort: 'newest' });
- * // { seniority: ['senior', 'lead'], sort: 'newest' }
+ * parseListingFilters({ seniority: 'senior,lead', company: 'acme', sort: 'newest' });
+ * // { seniority: ['senior', 'lead'], company: ['acme'], sort: 'newest' }
  */
 declare function parseListingFilters(search: Record<string, unknown>): ListingFilters;
 
-export { DEFAULT_SORT, EMPLOYMENT_TYPES, JOB_SORTS, type ListingFilters, REMOTE_OPTIONS, SENIORITIES, parseListingFilters, parseSeniority, seniorityLabels, sortLabels };
+export { DEFAULT_SORT, EMPLOYMENT_TYPES, JOB_SORTS, type ListingFilters, REMOTE_OPTIONS, SENIORITIES, parseCompany, parseListingFilters, parseSeniority, seniorityLabels, sortLabels };

package/dist/filters.d.ts

@@ -1,5 +1,6 @@
 import { B as BoardLabelOverrides } from './ui-copy-CKfFTtLk.js';
-import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-DMH3Ytoq.js';
+import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-DAGAVHQL.js';
+import './_spec-DRbgPIlN.js';
 
 declare const REMOTE_OPTIONS: readonly RemoteOption[];
 /**
@@ -33,6 +34,12 @@ interface ListingFilters {
     employmentType?: EmploymentType;
     /** Multi-select (parity with the hosted board's seniority checkboxes). */
     seniority?: Seniority[];
+    /**
+     * Company filter as PUBLIC SLUGS (the URL identity). Multi-select tolerated
+     * in URLs (comma-joined); the hosted UI applies single-replace. Map to the
+     * wire as `companySlug` (`jobs.list` query / `jobs.search` filters).
+     */
+    company?: string[];
     /** Result ordering (ADR-0048); absent ⇒ `relevance`. */
     sort?: JobSort;
 }
@@ -42,14 +49,21 @@ interface ListingFilters {
  * semantics: trim, lowercase, drop unknowns, dedupe preserving order.
  */
 declare function parseSeniority(raw: unknown): Seniority[] | undefined;
+/**
+ * Normalise raw company-slug input — an array (repeated params) or a
+ * comma-string (hand-typed URL) — with the hosted semantics: trim,
+ * lowercase, drop empties, dedupe preserving order, then cap at 10
+ * (the wire max; keep FIRST 10). Open value set (no vocabulary).
+ */
+declare function parseCompany(raw: unknown): string[] | undefined;
 /**
  * Validate raw URL search params into the supported listing filters,
  * dropping unknown values (never throwing — listing URLs are public input).
  *
  * @example
- * parseListingFilters({ seniority: 'senior,lead', sort: 'newest' });
- * // { seniority: ['senior', 'lead'], sort: 'newest' }
+ * parseListingFilters({ seniority: 'senior,lead', company: 'acme', sort: 'newest' });
+ * // { seniority: ['senior', 'lead'], company: ['acme'], sort: 'newest' }
  */
 declare function parseListingFilters(search: Record<string, unknown>): ListingFilters;
 
-export { DEFAULT_SORT, EMPLOYMENT_TYPES, JOB_SORTS, type ListingFilters, REMOTE_OPTIONS, SENIORITIES, parseListingFilters, parseSeniority, seniorityLabels, sortLabels };
+export { DEFAULT_SORT, EMPLOYMENT_TYPES, JOB_SORTS, type ListingFilters, REMOTE_OPTIONS, SENIORITIES, parseCompany, parseListingFilters, parseSeniority, seniorityLabels, sortLabels };

package/dist/filters.js

@@ -25,6 +25,7 @@ __export(filters_exports, {
   JOB_SORTS: () => JOB_SORTS,
   REMOTE_OPTIONS: () => REMOTE_OPTIONS,
   SENIORITIES: () => SENIORITIES,
+  parseCompany: () => parseCompany,
   parseListingFilters: () => parseListingFilters,
   parseSeniority: () => parseSeniority,
   seniorityLabels: () => seniorityLabels,
@@ -746,6 +747,7 @@ function sortLabels(locale, labels) {
     salary_high: copy.sortSalaryHighLabel
   };
 }
+var COMPANY_SLUG_MAX = 10;
 var SENIORITY_LOOKUP = new Set(SENIORITIES);
 function parseSeniority(raw) {
   const values = Array.isArray(raw) ? raw : typeof raw === "string" && raw ? raw.split(",") : [];
@@ -761,6 +763,20 @@ function parseSeniority(raw) {
   }
   return result.length > 0 ? result : void 0;
 }
+function parseCompany(raw) {
+  const values = Array.isArray(raw) ? raw : typeof raw === "string" && raw ? raw.split(",") : [];
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    if (typeof value !== "string") continue;
+    const normalized = value.trim().toLowerCase();
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+    if (result.length >= COMPANY_SLUG_MAX) break;
+  }
+  return result.length > 0 ? result : void 0;
+}
 function parseListingFilters(search) {
   return {
     q: typeof search.q === "string" && search.q ? search.q : void 0,
@@ -769,6 +785,7 @@ function parseListingFilters(search) {
       search.employmentType
     ) ? search.employmentType : void 0,
     seniority: parseSeniority(search.seniority),
+    company: parseCompany(search.company),
     sort: JOB_SORTS.includes(search.sort) ? search.sort : void 0
   };
 }

package/dist/filters.mjs

@@ -712,6 +712,7 @@ function sortLabels(locale, labels) {
     salary_high: copy.sortSalaryHighLabel
   };
 }
+var COMPANY_SLUG_MAX = 10;
 var SENIORITY_LOOKUP = new Set(SENIORITIES);
 function parseSeniority(raw) {
   const values = Array.isArray(raw) ? raw : typeof raw === "string" && raw ? raw.split(",") : [];
@@ -727,6 +728,20 @@ function parseSeniority(raw) {
   }
   return result.length > 0 ? result : void 0;
 }
+function parseCompany(raw) {
+  const values = Array.isArray(raw) ? raw : typeof raw === "string" && raw ? raw.split(",") : [];
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    if (typeof value !== "string") continue;
+    const normalized = value.trim().toLowerCase();
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+    if (result.length >= COMPANY_SLUG_MAX) break;
+  }
+  return result.length > 0 ? result : void 0;
+}
 function parseListingFilters(search) {
   return {
     q: typeof search.q === "string" && search.q ? search.q : void 0,
@@ -735,6 +750,7 @@ function parseListingFilters(search) {
       search.employmentType
     ) ? search.employmentType : void 0,
     seniority: parseSeniority(search.seniority),
+    company: parseCompany(search.company),
     sort: JOB_SORTS.includes(search.sort) ? search.sort : void 0
   };
 }
@@ -744,6 +760,7 @@ export {
   JOB_SORTS,
   REMOTE_OPTIONS,
   SENIORITIES,
+  parseCompany,
   parseListingFilters,
   parseSeniority,
   seniorityLabels,

package/dist/format.d.mts

@@ -1,7 +1,8 @@
-import { P as PublicJob, a as PublicJobCard, C as CustomFieldValues } from './jobs-DMH3Ytoq.mjs';
+import { P as PublicJob, a as PublicJobCard, C as CustomFieldValues } from './jobs-DhePKSRe.mjs';
 import { B as BoardLabelOverrides } from './ui-copy-CKfFTtLk.mjs';
 export { A as AlertsCopy, a as ApplyCopy, b as BlogCopy, c as BreadcrumbsCopy, C as CopyLinkCopy, E as EntityCopy, F as FooterCopy, J as JobCardCopy, d as JobDetailCopy, e as JobSearchCopy, N as NavCopy, P as PUBLIC_LABEL_GROUPS, f as PaginationCopy, S as SalaryCopy, U as UiCopy, u as uiCopy } from './ui-copy-CKfFTtLk.mjs';
-import { C as CustomFieldDefinition } from './board-CBry4f7H.mjs';
+import { C as CustomFieldDefinition } from './board-DCiNpgFf.mjs';
+import './_spec-DRbgPIlN.mjs';
 
 /**
  * Date display helpers in the board language (required leading parameter,

package/dist/format.d.ts

@@ -1,7 +1,8 @@
-import { P as PublicJob, a as PublicJobCard, C as CustomFieldValues } from './jobs-DMH3Ytoq.js';
+import { P as PublicJob, a as PublicJobCard, C as CustomFieldValues } from './jobs-DAGAVHQL.js';
 import { B as BoardLabelOverrides } from './ui-copy-CKfFTtLk.js';
 export { A as AlertsCopy, a as ApplyCopy, b as BlogCopy, c as BreadcrumbsCopy, C as CopyLinkCopy, E as EntityCopy, F as FooterCopy, J as JobCardCopy, d as JobDetailCopy, e as JobSearchCopy, N as NavCopy, P as PUBLIC_LABEL_GROUPS, f as PaginationCopy, S as SalaryCopy, U as UiCopy, u as uiCopy } from './ui-copy-CKfFTtLk.js';
-import { C as CustomFieldDefinition } from './board-tV-zcaHs.js';
+import { C as CustomFieldDefinition } from './board-BxPUtrOl.js';
+import './_spec-DRbgPIlN.js';
 
 /**
  * Date display helpers in the board language (required leading parameter,